October 2022 Summaries

Google Cloud VPN is a managed service that lets organizations securely access the resources they host in their Google Cloud Platform (GCP) virtual private clouds (VPCs). The pricing model for Google Cloud VPN is based on three items: cloud VPN gateway charge, number of non-tunnel external IP addresses assigned to a VPN gateway, and data transfer charges for IPsec egress traffic. Each VPN tunnel attached to a Cloud VPN gateway incurs an hourly fee that is based on the Google Cloud region in which the VPN gateway is located. The cost of each non-tunnel external IP address assigned to a VPN gateway is also based on the standard external IP address pricing, with static and ephemeral IP addresses used on standard VM instances costing $0.004 per hour and preemptible VM instances costing $0.002 per hour. Data transfer charges for egress traffic from the VPC the VPN gateway is located in are billed using two tiers of internet egress pricing - Standard and Premium - which charge based on the region, destination location, and aggregate monthly bandwidth used. Twingate offers a zero-trust alternative to Google Cloud VPN with a straightforward pricing model that is based on a per user flat fee model, subject to Fair Use Policy.

Twingate has partnered with ConductorOne to provide Just-in-Time, ephemeral access to private resources, making it more efficient and secure. This integration aims to simplify and centralize access controls, allowing admins to grant access for less-sensitive resources without sign off. The solution provides flexibility in creating granular access policies based on user, device, and resource sensitivity. It also offers visibility into all local and SSO users with access to Twingate resources, making it easy to scope and automate user access reviews. With ConductorOne, admins can replace the world of centralized IT access control, freeing up valuable time for their teams. The integration is designed to help companies adopt a zero trust framework in a logical and secure way without the pain of extra manual work.

Twingate has partnered with NextDNS to enhance its Secure DNS functionality, providing an additional layer of protection for end users. The partnership aims to mitigate the risks associated with unencrypted DNS queries, which can be easily intercepted and manipulated. NextDNS offers AI-based threat detection and filtering capabilities, blocking over 15 million malicious domains per month. The integration allows Twingate admins to review real-time logs and analytics, providing improved visibility and control over network activity. With this partnership, Twingate aims to help businesses move towards a Zero Trust architecture by tying every network event to an identity—user, device, and service.

Blend, a company, implemented a holistic Zero Trust strategy using Opal and Twingate to improve security while reducing user friction. With Opal, Blend employees can use a self-service app catalog to make requests, and admins can scale approvals and management through decentralization of system owners and managers. Twingate provides secure access with a modern Zero Trust Network Access (ZTNA) solution that combines enterprise-grade security with a consumer-grade user experience. The combination of Opal and Twingate empowers Blend to manage access granularly, reduce operational friction, and implement zero trust across its network, applications, and infrastructure, making it secure by default.

Paul Guthrie, an Information Security Officer at Blend, and Matthew Jackson, a Security Operations and Architecture Manager, discuss how Twingate and Opal support Blend's security needs. They highlight the challenges of granting access to users in a growing organization, such as manual and expensive processes that are prone to error. With the integration of Twingate and Opal, Blend is able to automate access management, tie logical access to network access, and implement zero-trust architecture. Twingate provides a secure access platform that replaces VPNs with a modern Zero Trust Network Access (ZTNA) solution, while Opal enables companies to implement scalable access management. The two solutions help Blend rapidly implement a modern Zero Trust network that is more secure and maintainable than traditional VPNs.